AW: Kerberos and Solaris 8

hooshang hooshang.dadgari at eng.sun.com
Mon Sep 16 12:23:15 EDT 2002


Do you have a /etc/resolv.conf file  and dns in front of files in /etc/nsswitch.conf file?

cat /etc/nsswitch.conf

hosts:  dns nis [NOTFOUND=return] files

Hooshang

Baernreuther Rainer wrote:
> 
> Hi Wyllys,
> 
> I checked the configuration file /etc/krb5/krb5.conf and the realms entry
> seems to be correct. I also changed the /etc/hosts file so that the fully
> qualified name of the local system is listed first but the error still
> occurs. Could it be that there something wrong with my GSS-API installation?
> 
> Rainer
> 
> > -----Ursprüngliche Nachricht-----
> > Von: Wyllys Ingersoll [mailto:wyllys.ingersoll at sun.com]
> > Gesendet: Freitag, 13. September 2002 14:13
> > An: Baernreuther Rainer; kerberos at mit.edu
> > Betreff: Re: Kerberos and Solaris 8
> >
> >
> >
> > This means it cannot find the hostname for your kdc by looking in
> > the /etc/krb5/krb5.conf file.  SEAM wants the krb5.conf
> > file in its own directory (/etc/krb5/) whereas MIT expects it to be
> > just another file in the "/etc" directory, so make sure you have your
> > config files in the right place.
> >
> > Do you have an entry like this in /etc/krb5/krb5.conf:
> > ...
> > [realms]
> >      MYREALM.COM = {
> >             kdc = mykdc.myrealm.com
> >             admin_server = mykdc.myrealm.com
> >       }
> > ...
> >
> > Also, make sure that in your local /etc/hosts file, you have
> > the fully qualified name of the local system listed first.  Kerberos
> > can be picky about hostnames, its best to use the fully qualified
> > names when creating host principals.
> >
> > -Wyllys
> >
> > Baernreuther Rainer wrote:
> > > Hi,
> > >
> > > I installed SEAM on my Solaris 8 computer and I configured
> > Kerberos as
> > > described in the Sun documentation but as soon as I start
> > the kadmin.local
> > > application I get the following error message:
> > kadmin.local: unable to get
> > > host based service name for realm MYREALM.COM
> > > Can anyone tell me what this error message means?
> > > Thanks in advance.
> > >
> > > Kind regrads
> > > Rainer
> > > ________________________________________________
> > > Kerberos mailing list           Kerberos at mit.edu
> > > http://mailman.mit.edu/mailman/listinfo/kerberos
> >
> >
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> http://mailman.mit.edu/mailman/listinfo/kerberos



More information about the Kerberos mailing list